Malicious
PE Executable
MD5: 25171d7225dbe079648ac2fa68fb67d9
Size: 5.96 MB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Portable Executable file
Size
5.96 MB · 5,959,024 B
First seen
2026-08-11 20:31 · 2 months ago
Last seen
2026-08-11 20:31 · 2 months ago
Last analysis
2026-09-03 21:02 · one month ago
Hashes
MD5
25171d7225dbe079648ac2fa68fb67d9
Sha1
af3e431a1cf307ca020208ef545df339254f60dd
Sha256
172a28a070ecce10944fb885bc7bf43d32593ee9438725d6ae5ed7b8908c973d
Sha384
6bd15095e7ae56bfffb7f9b47d5ad3665f89bb6b5d8722e4f6d8188154efc9c40f1f2c0181f95187b08c416ecffe020f
Sha512
92e0b06c80ab489555a83358edbbca502357ca73432bcdda81e46a3833cef4be2c4aa0c009a92eee6ce3f0ff6937cabb215456254274bce6cc90d36fa3c4b727
SSDeep
49152:0aBHhgZO1XIg26i7IfmFSu0IHfscg/etWGKWoVLKa0sPJZ4Yd/55TPEDAacE9Ef:0aaCyWGKd2Yd/55DEDFEf
TLSH
C8565A13EE5649F9C199A735C8B74616BA60B80D4B3133E31E52BE782F723C16E74B60
Detection
PeID
HQR data fileMicrosoft Visual C++ v6.0 DLLPrivate EXE Protector V2.30-V2.3X -> SetiSoft TeamtElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!
1 malicious · 2 files
EXE25171d7225dbe079648ac2fa68fb67d9T1027 · T1055Vidar Stealer
Structure
P7B[Authenticode]_9bd5f191.p7b
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:exe~T1027~T1055>bin
Shape
pe:exe>bin
malicious
2 nodes
| Name | Value |
|---|---|
| Info | Authenticode present at 0x5AE400 size 2416 bytes |